a. Explain the suitability or unsuitability of the following passwords:

i. YK 334

ii. mfmitm (for my favorite movie is tender mercies)

iii. Natalie1

iv. Washington

v. Aristotle

vi. tv9stove

vii. 12345678

viii. dribgib

b. The inclusion of the salt in the UNIX password scheme increases the difficulty of guessing by a factor of 4096. But the salt is stored in plaintext in the same entry as the corresponding ciphertext password. Therefore, those two characters are known to the attacker and need not be guessed. Why is it asserted that the salt increases security?

c. Assuming you have successfully answered the preceding problem and understand the significance of the salt, here is another question. Wouldnt it be possible to thwart completely all password crackers by dramatically increasing the salt size to, say, 24 or 48 bits?

d. For the biometric authentication protocols, note the biometric capture device is authenticated in the case of a static biometric but not authenticated for a dynamic biometric. Explain why authentication is useful in the case of a stable biometric, but not needed in the case of a dynamic biometric.